Under the DPDP framework, companies classified as Data Fiduciaries are fully responsible for how their vendors process personal data.